Efficient distillation beyond qubits 
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We provide generalizations of known two-qubit entanglement distillation protocols for arbitrary 
Hilbert space dimensions. The protocols, which are analogues of the hashing and breeding proce- 
dures, are adapted to bipartite quantum states which are diagonal in a basis of maximally entangled 
states. We show that the obtained rates are optimal, and thus equal to the distillable entanglement, 
for a (d — 1) parameter family of rank deficient states. Methods to improve the rates for other states 
are discussed. In particular, for isotropic states it is shown that the rate can be improved such that 
it approaches the relative entropy of entanglement in the limit of large dimensions. 

PACS numbers: 03.65.Bz, 03.67.-a 



I. INTRODUCTION 

The possibility of entanglement distillation plays a cru- 
cial role in Quantum communication and Quantum infor- 
mation processing (cf. ^). Together with quantum er- 
ror correction it enables all the fascinating applications 
provided by Quantum information theory in the pres- 
ence of a noisy and interacting environment. It provides 
a method to overcome decoherence without requiring a 
complete isolation from the environment. 

The usual abstract way of thinking about entangle- 
ment distillation is the following: Two parties, Alice and 
Bob, situated at distant locations share n copies of a 
mixed entangled quantum state p, which they may have 
obtained by sending one part of a pure maximally en- 
tangled state through a noisy quantum channel. Assume 
that both parties are able to perform any collective quan- 
tum operation, which merely acts locally on their part of 
the n copies. Moreover, Alice and Bob are connected 
via a classical channel, such that they can perform arbi- 
trary many rounds of local quantum operations, where 
each round may depend on the measurement outcomes 
of all the preceding operations on both sides. The set of 
operations accessible in this way is called LOCC (local 
operations and classical communication). 

It was shown in one of the seminal works from the early 
years of quantum information theory |^ that under the 
above conditions Alice and Bob can for certain two-qubit 
states distill a smaller number m of states p', which are 
closer to the maximally entangled state than the initial 
ones, from a larger number n > m of weaker entangled 
states p. This can be done in such a way that in the 
limit n — > oo the output states p' become maximally en- 
tangled. The asymptotic ratio m/n is then called the rate 
of the distillation protocol and the maximally accessible 
rate under all LOCC protocols is an important measure 
of entanglement, the distillable entanglement D{p). The 
latter quantifies in some sense the amount of useful en- 



tanglement contained in the state p. 

Up to now the hashing/breeding distillation protocol 
presented in (|, ||], which is adapted to Bell diagonal 
states of two qubits, is essentially the only protocol lead- 
ing to a non-zero rate in the asymptotic limit. 

The present paper is devoted to generalize these pro- 
tocols to higher dimensions. We will thereby closely fol- 
low the ideas of Ref. ||^, ^. The protocols are adapted 
to states which are diagonal in a basis of maximally en- 
tangled states or mapped onto such states by an LOCC 
twirl operation. The main step is to translate the appar- 
ent quantum task into a classical problem in such a way 
that all the operations involved are LOCC. The following 
results are obtained: 

• We provide an entanglement assisted distillation 
protocol (breeding) that works for any finite dimen- 
sion d. It is in this case assumed that Alice and Bob 
share maximally entangled states initially, which 
they may have obtained with a different protocol 
(e.g. hashing in a prime dimensional subspace) and 
with a smaller rate. The attained distillation rate 
is given by 



log2 d 



s{r{p)), 
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where S(T{p)) is the von Neumann entropy of the 
twirled state p. 

• We show that a hashing protocol exists for prime 
dimensions d, which does not require any predis- 
tillcd states. The obtained rate is the same as in 
Eq. (|l|). The method can easily be generalized to 
dimensions which are powers of primes, if one uses 
a different basis of maximally entangled states. 

• Both protocols, breeding and hashing, are shown 
to be optimal for a (d — 1) parameter family of 
low rank states. This generalizes the observation 
of Rains Q for the case d = 2. 

• We discuss methods for improving the rates for 
Isotropic states. In particular the projection onto 
local subspaces will turn out to yield the optimal 
rate in the limit of large dimensions. 
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Despite the practical relevance and quite considerable 
effort in the theory of entanglement distillation, many of 
the basic questions are yet unanswered. So do we nei- 
ther know a decidable necessary and sufficient criterion 
for distillability in Hilbert spaces with d > 2, 
nor do we know D{p) even for otherwise simple quantum 
states p. What makes the investigation of distillability so 
difficult is on the one hand the asymptotic limit (n — s- oo) 
and on the other hand the mathematically intractable set 
of LOCC operations. 

However, many partial results have been obtained in 
various directions, and before we go into the details of 
the present article we want at least to briefly recall some 
of them: 

a. Distillability: For the case of two qubits it was 
shown in that every entangled state is distillable. 
A general necessary condition for the distillability of a 
state p is the fact that its partial transpose p^^ , defined 
with respect to a given product basis by {ij\p'^^\kl) = 
{kj\p\il), has a negative eigenvalue ||]. Except for spe- 
cial cases like states on ® C" [|[ 0] and Gaussian states 

it is however unclear whether this condition is suffi- 
cient as well. There is some evidence presented in [Q, ^ 
that this may not be the case and that there are indeed 
undistillable states, whose partial transpose is not posi- 
tive (NPPT). However, it was shown in Q (see also 1 11 ) 
that every NPPT state becomes distillable when adding a 
certain bound entangled state with positive partial trans- 
pose (PPT). Moreover, this activation process was shown 
to require only an infinitesimal amount of entanglement 
contained in the additional PPT state | |lO[ |. 

b. Distillation protocols: Up to now, essentially 
the only mixed state distillation protocol leading to 
a non-zero rate in the asymptotic limit is the breed- 
ing/hashing protocol presented in ^, which is adapted 
to Bell-diagonal states of two qubits. There are, how- 
ever, several purification schemes which increase the pu- 
rity and entanglement of a state without yielding a non- 
zero rate on their own. The best known examples are 
the recurrence protocols presented in |j (see |13 for 
the discussion of imperfect operations) and [Q. These 
were investigated also for higher dimensions in [ p^ and 
[ p^ . In it was shown that these methods can be im- 
proved by using more than one source state per target. A 
systematic generalization of the local unitaries applied in 
the recurrence method for two qubit systems has recently 
been provided in jl^ . A protocol which is analog to the 
hashing procedure but uses PPT preserving rather than 
LOCC operations is described in [ p^ . 

c. Distillable Entanglement: For pure states the 
distillable entanglement is equal to the von Neumann en- 
tropy of the reduced state For mixed states only 
bounds are known, which can be calculated for some very 
special cases (cf. ||2l|). The best known upper bound 
for the distillable entanglement can be found in |22 . A 



closely related bound, which we will describe in detail 
later, is given by the relative entropy of entanglement 

MM- 



d. Relations to other Quantum information tasks: 
It was already noticed in Q that a distillation proto- 
col involving only one-way classical communication (like 
the hashing protocol) corresponds to a quantum error 
correcting code and vice versa. Moreover, upper bounds 
for the distillable entanglement allow one to obtain up- 
per bounds for quantum channel capacities (cf. p^). In 
particular, the inequality 



Diip) > 5(trB[ 



(2) 



where Di{p) is the distillable entanglement for one-way 
communication protocols, implies Shannon- like formu- 
las for quantum capacities, providingthe quantum noisy 
coding theorem [ p4| . The inequality (g) is consistent with 
the results we obtain in Sec. 0. 

An important application of distillation and purifica- 
tion schemes is also the possibility of factoring out an 
eavesdropper for secret quantum communication ^ . 
This is known as Quantum privacy amplification. 



II. PRELIMINARIES 

Let us first introduce the preliminaries we need for 
the distillation protocols described in Sec. Ill and IV. 



We begin with characterizing the states for which the 
protocols are adapted and we will subsequently specify 
the set of required local operations. 



A. Basis of maximally entangled states 

Bases of maximally entangled states {^'fe;}, k^l € 
{0, . . . , d — 1} exist for any Hilbert space H ~ ® 
and correspond to an orthonormal operator basis of 
unitary d x d matrices {Uki} via 



(3) 



with |f2) being a maximally entangled state. The lat- 
ter is in the following chosen to be |0) = l^'oo) = 
"73 5I]j=o ^ general construction procedure |^ for 
unitary operator bases involves Latin squares and com- 
plex Hadamard matrices and the best known example 
constructed in this way is of the form 



(4) 



where ® means addition modulo d. The set of unitaries in 
(^ is orthonormal with respect to the Hilbert-Schmidt 
scalar product, i.e., tr [U*jUki] — dSikSji, and forms a 

discrete Weyl system since UijUki = r]^^Ui^k,j(Bi- 

In the following we will solely use the maximally en- 
tangled basis from Eqs.(|^,^) or tensor products thereof 
and denote the first index as the shift and the second as 
the phase index. 
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B. Symmetric states 

Symmetric states commuting with a group of local uni- 
taries play an important and paradigmatic role in Quan- 
tum information theory and in particular in the con- 
text of entanglement distillation. The best known exam- 
ples are Werner states, Isotropic states and Bell diagonal 
states. The latter are convex combinations of the four 
maximally entangled Bell states of two qubits and con- 
tain in this case the Isotropic states, which are for two 
qubit systems in turn equivalent to Werner states. 

In analogy to the two qubit case, we will call a state 
on (g) Bell diagonal if it can be written as a con- 
vex combination of maximally entangled states = 
The corresponding symmetry group is given 

by 

G = {C/,,, C/,,_j}, (5) 

which is an abelian group with the property that its 
commutant, which is again spanned by G, contains 
one-dimensional projectors {Pij}. Hence, for {Ay } being 
convex weights: 

P = J2 ^ V.g G G : [p, g] = 0. (6) 

y 

Moreover, every not symmetric state p can be mapped 
onto a Bell diagonal state T(p) by means of a discrete 
twirl operation 

geG 

which can be implemented by means of local operations 
and classical communication (LOCC). 

Isotropic states, which are completely characterized by 
their fidelity f are a special instance of Bell 

diagonal states with Aqq — f and Ay = (1 — — 1) 

for ^ (0,0). An Isotropic state is entangled and 

distillable iff / > i 

C. Local operations and measurements 

An essential ingredient for any distillation protocol act- 
ing on two qubit systems is the CNOT operation. One 
possibility of generalizing this operation to higher dimen- 
sions is to use a controlled s/ii/t operation (CS) which 
acts as 

C\i)(^\j) = \i)(g>\j®i), (8) 

where the first tensor factor is the source and the second 
the target. It is readily verified that a bilateral controlled 
shift operation (BCS), where both parties in a bipartite 
system apply CS operations locally on a tensor product 
of two maximally entangled states, acts as 

(G«)G)|*,j)(g) = l^-.jei) ® l*fce»,i>, (9) 



where the first tensor product on the l.h.s. in (|S|) cor- 
responds to the AlicejBob split, whereas the others cor- 
respond to the source|target split. Note that the target 
state picks up the shift index of the source, i.e., k i— > k(3i, 
while the source remains unchanged iS I — 0. 

If we measure a target state of the form l^ti) in compu- 
tational basis, then k is the difference of the measurement 
outcomes. In this way we can obtain information about 
the shift index of an unknown source state, if we know 
the target state: We first apply a BCS operation and 
then measure the target state in computational basis. 

An analogous transformation can be defined for the 
phase indices, since we can simply interchange the two 
indices by the following local unitary operation: 

{V ® V) P., (V^V)*^ P,- V^^Y.'^'''\k){l\. 

(10) 

So we can define a modified bilateral controlled shift oper- 
ation (mBCS) by first applying a V(^V transformation to 
the source state, followed by a BSC operation on source 
and target and then undoing the local operation on the 
source state by a {ViS)V)* rotation. The mBCS operation 
then acts as 

Pij <^ Pki ^ Pm,j ® Pk®j,i, (11) 

where the second tensor factor corresponds to the target 
again. 

Assume now we have one target state |\E'oo) and n 
source states with shift indices ki, . . . ,kn and phase in- 
dices Zi, . . . , Z„. We now apply Sa BCS operations and Pa 
mBCS operations to the a-th source and the target. If 
we then measure the target state again in computational 
basis, the difference of the measurement outcomes will 
be 

n n 
[^kaSa)®[^laPa) =: {k , S) ® {I, p) . (12) 
a— 1 a— 1 

This enables us to obtain some information about the 
distribution of the shift and phase indices of the source 
states without disturbing them. 

In the following we will organize the shift and phase 
indices of a sequence of maximally entangled states in a 
single vector S :— (fci, . . . , fc„, h, . . . In) and accordingly 
the multiplicities of the BCS and mBCS operations in a 
vector M := (si, . . . , s„,pi, . . .p„). Both S and M then 
belong to {0, . . . , (i — 1}^", i.e. they are elements of the 
group Z^" with addition modulo d. 

The sequence of local operations characterized by M 
followed by a measurement of an additionally required 
target state Pqo thus yields the information 

(A/, S) := MA = {k, s) e {l,p) (13) 

i=l 

about a sequence S of maximally entangled states, with- 
out disturbing the latter. 
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To complete the list of later on required basic local 
operations we have still to introduce a generalization of 
a 7r/2 rotation given by 

k 

where (7 e Z is an arbitrary number. We will use this 
within bilateral operations of the form u{g) ® u{g) and 
v{g) (8) v{g), where v{g) := V*u{g)V. These unitary op- 
erations act on a maximally entangled state Pki as 

[u{g) (g) u{g)] Pki [u{g) ® u{g)\ * = Pk,iegk , (15) 
[v{g) ® v{g)] Pki [v{g) ® vig)] * = Pk(sai,i ■ (16) 

D. Why primes are special 

Measurements based on the Z^" scalar product in 
Eq. (|l3|) will play a crucial role in the entanglement distil- 
lation protocols discussed in the sequel. One of the main 
tasks will thereby be to choose the measurement vector 
M such that we obtain as much information about the se- 
quence S as possible. In general this can be a highly non- 
trivial problem. However, if the dimension d is a prime, 
then choosing M randomly turns out to be a pretty good 
choice. The reason why this works well only for prime 
dimensions is that in this case is a field, which means 
that it is not only an abelian group with respect to the 
addition modulo d, but also with respect to the multi- 
plication if we exclude the zero element. That is, for 
a,b,x G Zd, a ^ every equation of the form 

b = a ■ X mod d (17) 

has a unique solution for x if and only if d is prime. This 
leads us to the following lemma: 

Lemma 1 Let S =/= S' be elements of Z™ with d prime. 
Given a scalar product (x, y) :— ® j^j^ Xii/i and a uni- 
formly distributed random vector M G Z™, the probabil- 
ity for (A/, S) — (Af, S') is equal to 1/d. 

Proof: We ask for the probabihty that (5 - S',M) = 0. 
Since S ^ S', there exists a component x where Sx ^ 5^ 
and we can write 

= {S-S', M) = M^Sx -S'J + Y, M^iS^ - si). (18) 

Assume now that all Mi ,i ^ x are already randomly 
chosen. Then Eq. (|l|) has the form of Eq. (|l7| ) with x — 
Mx, a = {Sx - S'^) and b = J2^^^ M,{S[ - S,). Since 
this equation has a unique solution for x and is a 
uniformly distributed random variable, the probability 
that Mx matches the solution is indeed ^. □ 



III. THE BREEDING PROTOCOL 

The breeding protocol is the preliminary stage of the 
hashing protocol discussed in the next section. Both are 
adapted to the distillation of Bell diagonal states and the 
main idea is to transform this quantum problem into the 
classical problem of identifying a word given the prob- 
ability distribution of the respective alphabet and a re- 
stricted set of measurements. 

Assume that Alice and Bob share n copies of a Bell 
diagonal state p, such that 

^ Afe.z, •••Afc„z„Pfe,,,<g---0Pfe„,„. (19) 

ki...kn,l\...lji 

An appropriate interpretation of Eq. (|l9|) is to say that 
Alice and Bob share the state 

Pk,h®---®Pk^i„-^ Ps (20) 

with probability Xkih ■ ■ ■ Xk„i„- Note that if they knew 
the sequence S — (ki , . . . , fc„, Zi , . . . , In), they could apply 
appropriate local unitary operations in order to obtain 
the standard maximally entangled state P^"' and thus 
gain nlog2 d ebits of entanglement. 

Let us further assume that they have already a suf- 
ficiently large set of predistilled maximally entangled 
states Poo and that they are able to perform all the local 
operations such as BCS and mBCS operations described 
in the previous section. In this case they can utilize 
the predistilled states for performing local measurements 
leading to the result {M,S) as discussed in Eq.(|l3|) in 
order to obtain some information about the sequence S. 
However, every single measurement M will destroy one 
of the predistilled maximally entangled states, and the 
task is therefore to identify the sequence S using as few 
measurements as possible. 

At this point the quantum task of distillation is trans- 
formed into an entirely classical problem: Given an un- 
known vector S and the possibility of measuring func- 
tions of the form {M, S), how many measurements r do 
we need to identify S7 Knowing S we gain n maximally 
entangled pairs, but destroyed r, such that the overall 
gain would be (1 — r/n) log2 d ebits per copy. 

We would need r — 2n measurements to identify a 
completely random S € Z^" with independently and 
uniformly distributed components. So we would destroy 
more entangled pairs than we gain. 

Fortunately, however, the set of possible vectors S is 
not completely random but has a distribution depending 
on the spectrum of the Bell diagonal state p. In the limit 
of many copies there exists thus a set of likely sequences 
containing only 2^^^p'> < rf^" different vectors S with the 
property that the probability that a vector S is contained 
within this set of likely sequences approaches one in the 
limit n —> 00 [ p7| . Here S{p) is the von Neumann entropy 
of the density matrix, which is equal to the Shannon 
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entropy of the spectrum of p, i.e. 

S{p) = -J2^kilog2Xki. (21) 

k,l 

Now let Alice and Bob choose each measurement M 
randomly. Then Lemma 1 tells us that if d is prime, 
they can reduce their list of possible sequences by a fac- 
tor of 2 after every measurement by deleting every se- 
quence, which is not consistent with the obtained re- 
sult. Since their list initially contains 2"'^(''^ possible 
sequences, r — nS{p) / \0g2d measurements are required 
in order to identify S in the limit of large n. The rate 
obtained in this way in the asymptotic limit is a lower 
bound to the (entanglement assisted) distillable entan- 
glement which is thus 

D{p)>\og2d-S{p). (22) 

Let us now extend the obtained result, expressed in 
Eq. (p2[) , from prime dimensions to arbitrary ones. As we 
have already mentioned. Lemma 1 holds only for primes 
and cannot be extended. A way out of this dilemma is 
to use controlled shift operations between Hilbert spaces 
of different dimensions. The definition looks similar to 
Eq.(il): 

C"|z)® |j) := (23) 

with the only difference that i runs from to d— 1 whereas 
j runs from to d' — 1, where d' is now supposed to be a 
prime with d' > d. Moreover, the addition in the second 
ket (target) is modulo d' . 

The penalty of the BCS and mBCS operations based 
on such a controlled shift operation is, that the source 
states after the operation will in general no longer be of 
the form Pki given by Eqs.(|3|J|). However, they still are, 
if the target state, acting on (g) , has a phase index 
equal to zero. Then: 

(C ® C')\^,,) = Ivf,,,) ® |vl/',^, 0). (24) 

In this way we can straightforward generalize the result 
of Eq.(p2|) to Bell diagonal states of arbitrary dimen- 
sion, just by reshuffling the degrees of freedom of the 
predistilled maximally entangled states. Hence, the cru- 
cial point is, that the target states, which are in the case 
of the breeding protocol the predistilled resources, have 
prime dimensions. 

IV. THE HASHING PROTOCOL 

So far we have assumed that Alice and Bob initially 
share a set of predistilled maximally entangled states. 
We took into account this resource when calculating the 
rate, but since the additivity of the distillable entangle- 
ment is not yet decided for bipartite systems, we might 
expect a smaller rate for the (non entanglement assisted) 



distillation rate. The hashing protocol, however, achieves 
the same asymptotic rate as the previously discussed 
breeding protocol without requiring additional predis- 
tilled states. The main idea is though still the same: 
Alice and Bob identify the sequence S by means of LOCC 
operations. 

The protocol, however, is now a bit more complicated 
since if we use one of the n states characterized by S* G 
Z^" as target for the BCS and mBCS operations then 
we have to take into account the backaction from the 
unknown target to the remaining source states. 

We will in the following choose the n-th state char- 
acterized by Sn and S2n as the target and consider 
the remaining n — 1 states characterized by a vector 
R — (5i, . . . , Sn^i, Sn+ij • ■ • , S2n-i) as sourcc states. 

In the first step of the protocol a bilateral v{g)^v{g) ro- 
tation with a randomly chosen number g £ {0, . . . , d — 1} 
is applied to the target state. This shifts some informa- 
tion about the phase index of the target state into its 
shift index. 

Then a random vector M S is chosen and the 

two parties perform the respective BCS and mBCS op- 
erations. After measuring the target state, the difference 
of the measurement outcomes, i.e. the final shift index 
of the target, will be 

n-l 

(M; g\S) (M, R) -J2 M,M,+r.-iS2n + + gS2n- 

i=l 

(25) 

The first term {M,R) in Eq.(p5|) is the familiar 
outcome if the target state is Pqq. The terms 
— MiMi+n-iS2n + Sn corrcspoud to the other pos- 

sible targets and their backaction onto the source states, 
and the last term gS2n is due to the initial v(g) (g) v{g) 
rotation. 

Note that in general the outcome also depends on the 
order in which the different BCS and mBCS operations 
are carried out. For Eq.(p5|) first all BCS and then all 
mBCS operations were applied. 

With the possibility of measuring functions of the form 
) we will now follow the line of argumentation of the 
previous section and show that the gain of information 
is (asymptotically) at least logj d bits per measurement, 
if the dimension d is prime. Therefore we ask again for 
the probability that two different sequences S S' lead 
to the same measurement outcome under the assumption 
that M and g are uniformly distributed random variables. 
To this end we have to distinguish between three different 
cases: 

1. The two sequences only differ in Sn ^ S'^: This is 
the trivial case where S and S' are distinguished 
with unit probability. 

2. S and S" differ in the phase index of their target, 
i.e. S2n S2n' If wc assume in this case that M 
is already chosen, then the equation {M]g\S) = 
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(M; g\S') is of the form b = a - x with g playing the 
role of X. Hence, the probability that a randomly 
chosen g matches the right solution is ^, if d is 
prime. 

3. S and S' have a target state with the same phase 
index, i.e. iS'2ri — and R 7^ R': Then Lemma 
1 tells us, that a randomly chosen M distinguishes 
the two sequences R ^ R' with probability ^, if 
is prime. 

The hashing protocol consists now of several rounds 
of such measurements, where each round destroys the 
entanglement of one of the n pairs characterized by S. 
The relevant part of the system after r rounds is thus 
described by a vector S{r) G Z^'-""'^-' and the mea- 
surements applied to S{r) are in turn characterized by 
M(r) G Z^^""*""^' and g{r) G Z^. Note that given the 
sequence of measurements, the vector S{r) deterministi- 
cally depends on S = 5(0). 

The above discussion implies now, that the probability 



S{r) ^ S{r)' A 

^lZ}^:mr)-g(r)\S(r)~S{r)')=^ 



(26) 



that S(r) and S(r)' have agreed on all r measurement 
results and thereby remain distinct, is at most d^^ ^ if 
d is prime. Since we have initially again about T^^'^p^ 
likely sequences, we need (in the limit of large n) r — 
nS{p) / \0g2d rounds in order to identify the remaining 
sequence S{r). This leads us again to the rate in Eq.(22). 

What if d is no prime? Unfortunately, we cannot ex- 
tend the result to other dimensions in the way we did in 
the case of the breeding protocol, since we do not have 
any target states of prime dimension with zero phase in- 
dices. However, if the dimension is a power of a prime 
d = d'P, then we can easily extend the result for states 
which are diagonal with respect to a different basis of 
maximally entangled states, given by: 



kili 



(27) 



V. OPTIMALITY FOR LOW RANK STATES 

It is well known from the case of two qubit systems that 
the hashing/breeding protocol is not optimal in general. 
However, for a certain {d — 1) parameter family of rank 
deficient states, we will show that the obtained rate is 
equal to the relative entropy of entanglement. Since the 
latter is an upper bound to the distillable entanglement, 
this implies that the protocols are optimal in this case. 
For d ~ 2 this was first noticed by Rains in Q . 

Consider mixed states of rank smaller than or equal d 



(28) 



which are diagonal with respect to 

d-l 
^ r— 



(29) 



The set of these states forms a simplex in R''^-'^ and has 
the property that every state except for the barycen- 
ter, for which /i; = i, is entangled. To see this, note first 
that max;{/ii} is the fully entangled fraction. That is, if 
not all /i; are equal, then the fully entangled fraction is 
larger than ^ and the respective state is thus entangled. 
On the other hand, if /x; = ^ , then 



1=1 

l.r.s 



2m 



l{r 



r=0 



r){r\ (g) \r){r\ 



(30) 

|r,r)(s,s| (31) 
(32) 



is evidently a separable state, which is said to be maxi- 
mally correlated. We will denote this state by psop in the 
sequel. 

An upper bound to the distillable entanglement is 
given by the relative entropy of entanglement [Q, p3[ , 
which is defined by 



Er{p) = inf (tr [p(log2 p - log2 cr)] 



(33) 



where PkiU is a maximally entangled state acting on 
C*' (g) C''' . The (LOCC) twirl operation, which maps 
an arbitrary state onto a state diagonal in this basis is 
given by p 1-^ T®P{p). 

The hashing protocol can then be applied in the de- 
scribed manner to pn tensor factors of prime dimension 
d' and we yield in this way again the rate in Eq.(^) 
for states in d = d'^ dimensions. Moreover, note that 
isotropic states are diagonal in both bases, given by 
Eqs.dJl and Eq.(|^. 



where the infimum is taken over all separable states a. 
Hence, if we choose a = Pscp, the distillable entanglement 
is bounded by 

^(Pm) < Er{p^j.) < -tr [plog2 p,ep] - S{p^). (34) 

However, — tr [/9log2 Psep] = log2 d and the rate achieved 
by the breeding/hashing protocol is thus optimal for ev- 
ery p^. Strictly speaking, the hashing protocol leads 
to the distillable entanglement and the breeding rate is 
equal to the distillable entanglement D' assisted by a 
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maximally entangled resource u. The latter can easily 
be seen by noting that 

D'{p) = D{p<»cj)-En{uj) (35) 
< Er{p®lo) - Er{lu) < Er{p). (36) 

That is, the relative entropy of entanglement is an upper 
bound for the entanglement assisted distillable entangle- 
ment as well. 



VI. IMPROVING THE RATES FOR ISOTROPIC 
STATES 



For a general Bell diagonal state the introduced pro- 
tocols are not optimal. In particular for states with a 
large entropy the rate is poor or even zero. In order 
to improve this, one can make use of hybrid protocols, 
where the first step decreases the entropy while conserv- 
ing most of the entanglement, and in a second step the 
hashing/breeding protocol is applied. There are many 
ways of performing such an entropy decreasing prepro- 
cessing. We will in the following discuss two of them for 
the case of Isotropic states: The recurrence method 'which 
is well known f or q ubits |3| and has already been 
investigated by [T5[ [l6|| for d > 2, and the projection onto 
local subspaces. For the latter we will show that in the 
limit of large dimensions the rate approaches the rela- 
tive entropy of entanglement. Hence, the achieved rate 
is optimal in that limit. 

Isotropic states, for which we will discuss both methods 
in more detail, have the form 



1-/ 



p = f\^){^\ + ^^{i-\n){n\) 



(37) 



That is they are depolarized maximally entangled states 
depending on a single fidelity parameter / G [0, 1]. The 
twirl operation mapping every state onto an isotropic 
state has the form p ^ J dU{U (g) U)p{U (g) U)*, i.e. it 
is an averaging over the unitary group U (d) with respect 
to the Haar measure dU. The states in Eq.(|37|) are en- 
tangled (and distillable) iff / > ^ 



A. The recurrence method 

The recurrence method for higher dimensions and vari- 
ations thereof have already been discussed in detail in 
and ll^. For completeness, however, we will recall 
the main steps. The idea is to apply a BCS operation 
on two copies of the state and then to measure the tar- 
get state in computational basis. The source states are 
kept whenever the measurement outcomes coincide, oth- 
erwise they are discarded. The remaining states may 
then be twirled onto isotropic states again and we can 
proceed either with iterating the recurrence method or 
applying the hashing/breeding procedure if the entropy 
of the remaining states is already sufficiently small, i.e. 



S(p) < log2 d. We note that, as it was already mentioned 
in [14| for d = 2, the Isotropic twirhng after each step is 
not really necessary and in general increases the entropy 
and therefore decreases the rate of a subsequently ap- 
plied breeding/hasing protocol. However, it is sufficient 
to look at the fidelity parameter / in order to see that 
a recurrence preprocessing improves the rates such that 
every entangled Isotropic state becomes distillable. 

Straightforward calculation shows that the fidelity /' 
after applying the recurrence method once is given by 



/' 



i + ./[4f(rf' + rf-i)-2] 

d^P -2df + d^ + d-l 



(38) 



and the probability for equal measurement outcomes is 



Pi: 



d^P -2df + d^ + d-l 
{d+l)^d{d-l) ' 



(39) 



Note that the recurrence method alone does not lead to a 
non-zero rate since in every round we destroy or discard 
at least half of the resources (all the target states) and 
maximally entangled states are only obtained in the limit 
of infinitely many rounds. However, it holds that /' > / 
and therefore S{p') < S{p) for every entangled isotropic 
p. This means that every entangled isotropic state can 
be distilled with a non-zero rate by applying sufficiently 
many rounds of the recurrence protocol followed by hash- 
ing/breeding. 

There are many directions in which the recurrence 
method can be modified or improved. One could use 
more than one source state [Q, a different bilateral op- 
eration neglect the Isotropic twirling |14 , apply it to 
other kinds of states or use target and source states 
with different fidelities. 

In Figj^ we have applied the method as described above 
to an isotropic state of dimension d = 7. As expected this 
leads to an improvement of the rate in the region where 
Sip) ^ log2 d. 



B. Projecting onto local subspaces 

A surprisingly efficient method for improving the dis- 
tillation rate is to project the initial state locally onto 
blocks of smaller dimensions and to apply the hash- 
ing/breeding protocol to these subspaces. 

Let {Qi = \k){k\}he a, set of b projectors of dimen- 
sion Qi corresponding to a local projective observable with 
6 outcomes, i.e. X]i=i Qi = d and X]i=i Qi — ^d- Assume 
further that Alice and Bob have the same observable 
{Qf} — {Qf} and that they apply the respective mea- 
surement to an isotropic state p. Again the state is kept 
if the results of the measurements coincide and discarded 
otherwise. If both parties obtain the same measurement 
outcome i, which happens with a probability 



Qi r : (1 - /) / 2 _ Qi_ 
d'' (d2_l)V^' d 



(40) 
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FIG. 1: Normalized rates for Isotropic states of dimension 
d = 7. The upper bound (thick) is given by the relative 
entropy of entanglement. The hashing rate (solid) can be 
improved in the region S{p) ~ log2 d if one first applies one 
round of the recurrence method (dotted) or locally projects 
the state onto subspaces of dimension 3 and 4 (dashed). 



the state after the measurement pi ~ {Qf (K) Qf)p{Qf ® 
Qf)*/Pi is again an isotropic state on C' (g) C' with 
fidelity 



fii , (1- /) ^ qiW I 



(d2 _ 1) 



(41) 



If we now apply the hashing/breeding protocol to the b 
blocks, the obtained rate 



Pi max [O, log2 qi - H[pi)\ 



(42) 



exceeds logj d — H{p) for some values of / depending on 
the dimensions {qi] of the subspaces. If the dimensions of 
the blocks are about the same, then an increasing num- 
ber of blocks leads to a larger (smaller) rate for small 
(large) /. Fig.|l| and Fig.^j show the obtained rates for 
d = 7 and the case where the two parties share 10 pairs 
of qubits and the overall state is isotropic. For the lat- 
ter case the rate is already not too far below the relative 
entropy of entanglement. In fact, the content of the fol- 
lowing subsection is to sketch that in the limit of large 
dimensions d — s- oo the relative distance between these 
quantities vanishes for all /. 



C. The limit of large dimensions 

As we have already mentioned, an upper bound for 
the distillable entanglement is the relative entropy of en- 
tanglement, i.e. the minimal distance between p and a 
separable state a measured in terms of the relative en- 
tropy 



FIG. 2: Normalized rates for the case where p consists of 
ten pairs of qubit systems (d = 2^") and the overall state 
is isotropic. The upper bound (thick) is given by the rela- 
tive entropy of entanglement. The hashing rate (solid) can 
be significantly improved when projecting onto subspaces of 
dimension 2™, m — 1, ... ,9. The dashed line is the envelope 
of the rates obtained in this way. The dotted curve is the rate 
one would achieve when considering p as a set of 10 pairs of 
qubits, twirling onto isotropic states on ® and applying 
the hashing protocol then on the two-qubit level. 



For entangled isotropic states the nearest separable state 
is the isotropic state with f — 2 HI' 1^ HOl ^'^"^ 
relative entropy of entanglement is thus 

Er{p) = log2 d-{l-f) \og,{d - 1) - S{f, 1 - /), (44) 

for f > 2 zero otherwise, where S is again the Shan- 
non entropy. Note that in the limit of large dimensions 
this becomes after normalization 



i™ "i J = f- 

d— >oo 10g2 d 



(45) 



The same limit, however, appears for the distillation rate 
obtained with the block projection method described in 
the previous subsection. 

Assume that d = 2™, i.e. a single state p consists of m 
pairs of qubits, and let the local measurements have m 
outcomes corresponding to subspaces of equal dimensions 
qi — 2"^/m. We can then estimate the probability of 
success and the achieved fidelity (for m> (1 — /)~"'^) by 



/.>/:= 



/~4-'" 
m 

fm+1' 



(46) 
(47) 



S {p, (t) = tr [p log2 p] - tr [p log2 a] 



(43) 



In the limit of large to, the Eqs.([46|, |47| ) tell us that we 
gain TO (almost) maximally entangled states of dimension 
q — 2™ /to with probability //to. Looking at the normal- 
ized entanglement as in Eq. ([45|) leads then indeed to the 
same limit as for the relative entropy of entanglement. 
Hence, we (relatively) approach the distillable entangle- 
ment in the limit of large dimensions. However, the main 
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reason for this is, that the relative entanglement differ- 
ence of two maximally entangled states in 2™/to resp. 
2™ dimensions vanishes for ni ^ oo. Hence, the result is 
not as deep as it might seem at first glance. 

Nevertheless, projecting onto blocks of lower dimen- 
sions can significantly improve the rates yet for finite di- 
mensions as shown in Figs.|l|,^ 

VII. CONCLUSION 

Despite considerable efforts in the theory of entangle- 
ment distillation, this field of investigation provides many 
open questions even on a very basic level. Due to the 
complexity of the underlying variational problem it is 
hard to find good upper and lower bounds to the dis- 
tillable entanglement, not to mention an explicit calcu- 
lation of this measure of "useful entanglement". So far, 
the most important distillation protocol leading to a non- 
zero rate, and thus to a non-trivial lower bound to the 
distillable entanglement, has been adapted to Bell diag- 
onal states of two qubits. Of course, this protocol can 
also be applied to higher dimensional states by either 
projecting down to qubits or by interpreting the state as 
a tensor product of qubits if possible (compare Fig.||). 
However, both methods will in general discard most of 
the entanglement. 



The present article shows how to generalize the breed- 
ing and hashing protocol to higher dimensions. The ob- 
tained rates are optimal only for special cases, however, 
they provide an improved lower bound to the distillable 
entanglement in general. Both protocols consist out of 
two steps: first the quantum task is translated to a clas- 
sical problem and then the latter is solved. The classical 
part of the protocol is already essentially optimal, how- 
ever, some information and hence entanglement is lost 
during the 'translation process'. 

We think that the presented results admit further gen- 
eralizations towards other classes of states and may be 
also with respect to the restriction of the hashing proto- 
cols to dimensions which are (powers of) primes. 

We hope that our work initiates further investigations 
concerning the distillation of entanglement, including ex- 
plorations of the implications coming from recent works 
in the field of quantum error correcting codes. 
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